Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: XfeYd6iNug4eOyUQkbWht6gCpaRnkr6jJ1L9l4tBZbI=
Subject key identifier: 31:3D:B6:E9:66:C3:C9:A1:F5:AC:B2:E8:43:18:11:D7:32:8E:FA:96
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01A13DEF3075377559AAE55365CB41BA510E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0FF5
Signing time: Thu 15 Oct 2026 05:00:48 +0000
Manifest this update: Thu 15 Oct 2026 05:00:48 +0000
Manifest next update: Fri 16 Oct 2026 05:00:48 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: 81LM2npU2/u/ZVzMkVZJWDD+RaRy/7XDCGPYkqD7x/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:30:75:37:75:59:aa:e5:53:65:cb:41:ba:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Oct 15 05:00:48 2026 GMT
Not After : Oct 16 05:00:48 2026 GMT
Subject: CN=313db6e966c3c9a1f5acb2e8431811d7328efa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:24:5c:d3:b1:fa:12:af:56:31:c4:c9:e6:
02:ff:fb:c4:df:9d:08:30:c6:a4:c6:1f:1c:82:15:
f3:c1:d5:66:c9:53:ee:34:60:b5:02:32:d3:03:ed:
58:b7:4d:f5:62:f8:7a:32:64:94:65:34:65:f2:c0:
52:f5:45:ed:e2:d3:5b:67:46:d7:25:3a:f6:b4:02:
85:ee:2f:18:0a:67:79:63:c1:59:08:9f:4a:a2:bc:
c5:f1:8e:2b:3e:6e:1e:92:df:1a:d4:a7:2a:fc:f5:
d4:f8:92:e7:fc:2a:e0:e3:92:b3:8c:95:bc:08:31:
25:69:36:e5:d1:7e:ed:4c:74:02:26:31:a3:74:61:
9e:2e:8c:bf:06:fb:dd:25:bf:38:26:08:1b:28:7e:
58:d5:42:0e:21:27:ed:22:45:6d:58:66:ea:0d:54:
96:f0:40:50:68:d1:e7:86:81:85:3c:6c:f7:75:98:
ae:8b:db:4a:c3:8e:87:88:ea:b3:54:96:ea:57:29:
ba:cd:a3:62:04:64:8c:cb:f4:e3:50:d4:96:6d:0f:
93:19:75:85:38:fc:fd:11:cd:3c:5d:18:26:6e:37:
93:f4:3f:3d:c8:4d:8c:66:a0:e7:6a:bd:18:14:fa:
a7:61:3c:e0:9f:e8:ff:3e:1b:7f:36:3c:b4:b4:e8:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:B6:E9:66:C3:C9:A1:F5:AC:B2:E8:43:18:11:D7:32:8E:FA:96
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:55:89:62:02:0c:f2:51:15:ed:0d:66:af:e2:ff:07:c0:f1:
79:11:7d:b9:c3:5c:b9:bd:9e:6e:ef:ef:c5:39:67:d9:40:68:
55:c2:78:00:8b:84:80:ab:87:cd:93:5f:82:eb:3a:2f:b4:2a:
ff:23:ce:6f:d4:c5:58:5f:f5:fb:f3:84:f1:53:22:f3:35:92:
14:e0:dc:70:39:b9:dd:7a:69:08:57:30:97:4d:1c:28:d1:8c:
9b:31:a4:ea:22:2b:ab:74:64:9f:15:5d:69:12:64:8c:cd:41:
d7:54:57:16:b6:f3:0c:65:96:b3:91:12:15:1c:f1:85:43:47:
ad:14:55:e4:91:fd:ff:b0:a1:23:75:85:4e:79:ae:d1:90:5a:
74:98:b0:a5:19:47:6c:b4:57:5c:fd:3b:c2:6e:72:73:f8:b3:
86:f0:cb:f4:f5:d5:2c:27:b5:b1:59:10:2d:bd:98:49:95:49:
38:a8:a3:e7:35:19:e6:58:5e:d9:2d:06:e8:07:a7:10:0b:b6:
9a:82:c6:66:d6:b8:a0:fa:78:84:79:f6:93:c8:3a:ab:e5:46:
bb:d4:73:7b:54:21:46:84:ab:2b:34:b9:f4:48:40:76:58:8b:
2e:ae:90:7b:aa:ea:88:38:cd:ab:23:48:de:ce:dd:9d:fb:6f:
d9:c5:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:01:35 2026 by rpki-client